AWS prescriptive-guidance documentation change
Summary
Updated URL reference for ISA/IEC 62443-3-2 security standard documentation
Security assessment
The change only modifies a hyperlink destination for an existing security standard reference. No security content or recommendations were altered.
Diff
diff --git a/prescriptive-guidance/latest/security-reference-architecture-iot/iot-capabilities.md b/prescriptive-guidance/latest/security-reference-architecture-iot/iot-capabilities.md index 6b2365cd9..2dfef7c4e 100644 --- a//prescriptive-guidance/latest/security-reference-architecture-iot/iot-capabilities.md +++ b//prescriptive-guidance/latest/security-reference-architecture-iot/iot-capabilities.md @@ -39 +39 @@ Whether you're deploying consumer IoT devices, industrial IoT workloads, or oper -In OT or IIoT environments, consider partitioning the system under consideration (SuC) into separate zones and conduits in accordance with [ISA/IEC 62443-3-2, Security Risk Assessment for System Design](https://gca.isa.org/blog/white-paper-excerpt-leveraging-isa-62443-3-2-for-iacs-risk-assessment-and-risk-related-strategies). The intent is to identify assets that share common security characteristics in order to establish a set of common security requirements that reduce cybersecurity risk. Partitioning the SuC into zones and conduits can also help reduce overall risk by limiting the impact of a cyber incident. Zone and conduit diagrams can assist in detailed OT or IIoT cybersecurity risk assessments and help in identifying threats and vulnerabilities, determining consequences and risks, and providing remediations or control measures to safeguard assets from cyber events. +In OT or IIoT environments, consider partitioning the system under consideration (SuC) into separate zones and conduits in accordance with [ISA/IEC 62443-3-2, Security Risk Assessment for System Design](https://www.automation.com/article/white-paper-excerpt-leveraging-isa-62443-3-2-for-iacs-risk-assessment-and-risk-related-strategies). The intent is to identify assets that share common security characteristics in order to establish a set of common security requirements that reduce cybersecurity risk. Partitioning the SuC into zones and conduits can also help reduce overall risk by limiting the impact of a cyber incident. Zone and conduit diagrams can assist in detailed OT or IIoT cybersecurity risk assessments and help in identifying threats and vulnerabilities, determining consequences and risks, and providing remediations or control measures to safeguard assets from cyber events.